Steve, Thank you! That worked.
That option doesn't exist in the man page for s_server (1.0.1 2013-06-04) for me, so this may be a documentation bug then? Thanks again! Jim On 08/06/2013 10:46 AM, Stephen Henson via RT wrote: > On Fri Aug 02 10:23:23 2013, j...@jimkeener.com wrote: >> With -verify and -Verify I believe that the server should reject the >> connection if the certificate isn't signed by a valid CA. Is there a way >> to emulate such behaviour, or is there a reason that this behaves in >> such a manner? >> > The -verify and -Verify options just decide if a certificate should be request > and if the client must use a certificate. For debugging purposes, by default, > the connection continues if the chain doesn't verify. If you use the option > -verify_return_error the connection should fail. > > Steve. > -- > Dr Stephen N. Henson. OpenSSL project core developer. > Commercial tech support now available see: http://www.openssl.org > ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List Manager majord...@openssl.org
